fix(bug-assess): set min-integrity: none to allow reading external user issues

[Copilot]

The bug-assess workflow was failing with an integrity policy error when triggered on issues from external (non-collaborator) users. The automatic lockdown mechanism sets min-integrity: approved by default, but external user content is classified as unapproved, causing the GitHub MCP server to filter the issue body entirely — making bug assessment impossible for the exact issues this workflow exists to handle.

Changes

• bug-assess.md: Added min-integrity: none under tools.github to explicitly allow the agent to read issue content from any user

  tools:
    github:
      toolsets: [issues, repos]
      min-integrity: none   # ← added

• bug-assess.lock.yml: Recompiled — guard policy now emits "min-integrity": "none" statically instead of reading $GITHUB_MCP_GUARD_MIN_INTEGRITY at runtime

The setting is appropriate here: the workflow is purpose-built to read untrusted issue content, already carries explicit prompt-injection guardrails, and its only write outputs are one comment and up to two labels.

[Copilot]

Pull request overview

This PR updates the bug-assess agentic workflow configuration to allow reading issue content from external (non-collaborator) users by lowering the GitHub MCP integrity threshold.

Changes:

• Set tools.github.min-integrity: none in .github/workflows/bug-assess.md.
• Recompiled the generated lock workflow .github/workflows/bug-assess.lock.yml to reflect the new MCP guard policy behavior and newer gh-aw compiler/runtime.
• Adjusted Dependabot ignore entries and minor repo metadata/config files related to generated workflow handling.

Show a summary per file

File	Description
.github/workflows/bug-assess.md	Lowers GitHub MCP minimum integrity to allow reading unapproved external issue content.
.github/workflows/bug-assess.lock.yml	Regenerated compiled workflow reflecting new guard policy settings and updated gh-aw versions.
.github/dependabot.yml	Expands ignore patterns for gh-aw actions dependencies.
.github/aw/actions-lock.json	Removes a previously-locked gh-aw setup action entry.
.gitattributes	Adjusts attributes for generated *.lock.yml workflows.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 5/5 changed files
• Comments generated: 3

[Copilot]

Copilot's findings

• Files reviewed: 5/5 changed files
• Comments generated: 7

[Copilot]

Copilot's findings

• Files reviewed: 4/4 changed files
• Comments generated: 6